This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft File: 11489A5805B7FE2710AE32C3077C3450579D1288.mft (raw, json) Hash identifier: 6sDzMoHGIhuCfQyMq9IgFFV/+621hHHiUJI07T1vMCA= Subject key identifier: B3:00:06:6D:62:7A:1B:EA:37:DE:7D:3A:CF:17:9E:49:0B:AA:F6:79 Authority key identifier: 11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88 Certificate issuer: /CN=11489A5805B7FE2710AE32C3077C3450579D1288 Certificate serial: 4BBF84331C35E6D77661ECCBA2B36C469DA72B0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft Manifest number: 0154 Signing time: Sun 25 Jan 2026 09:21:52 +0000 Manifest this update: Sun 25 Jan 2026 09:16:52 +0000 Manifest next update: Wed 28 Jan 2026 18:24:52 +0000 Files and hashes: 1: 11489A5805B7FE2710AE32C3077C3450579D1288.crl (hash: TpdBCK6N0E2RZKbfQuLCDekFAxWP7TXzS9ML9g2IzEU=) 2: 3130332e3131332e32362e302f32342d3234203d3e20313337333339.roa (hash: 96bScFlvdzCB0qXA/HCwI1sZDRYZx3jWpR+NJxZy45w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.crl rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:bf:84:33:1c:35:e6:d7:76:61:ec:cb:a2:b3:6c:46:9d:a7:2b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11489A5805B7FE2710AE32C3077C3450579D1288 Validity Not Before: Jan 25 09:16:52 2026 GMT Not After : Jan 28 18:24:52 2026 GMT Subject: CN=B300066D627A1BEA37DE7D3ACF179E490BAAF679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:36:6e:00:f3:32:f5:15:3e:cf:c4:4f:74:49: 4a:17:cd:22:9b:18:fd:72:76:73:14:2f:71:11:08: 6e:d8:f6:62:c3:44:60:2a:ce:5f:12:c0:16:2b:f2: d3:75:da:7d:88:85:89:d7:a4:5c:73:0b:81:99:18: d9:fe:53:fb:c5:21:99:b3:49:fb:65:c9:34:cc:ae: a1:8c:8e:14:af:93:00:20:90:fd:9c:e3:72:8c:2f: 72:14:29:d6:e8:bf:f3:ef:6b:33:71:34:44:62:e2: 4a:9b:5d:86:18:28:c6:d1:dd:ce:09:a4:b9:e3:95: 93:c4:0e:a1:d1:83:e9:83:4c:72:fa:a3:11:43:12: 76:cc:d2:df:44:a6:93:8a:80:e0:f6:a0:3b:43:7d: 2e:93:17:5f:93:93:83:c9:66:a7:bf:29:ce:79:a8: cf:2b:eb:60:5e:1a:e5:56:d6:49:d2:60:9c:cb:aa: ea:e3:27:a9:fb:7a:5c:69:87:58:d0:9c:ff:55:71: 53:35:19:55:85:e4:71:64:96:b4:cf:92:2c:ff:aa: 12:99:f2:bd:12:79:12:1a:4c:5b:75:1c:4c:7e:53: f9:7a:58:93:8a:bd:c2:19:c3:9d:3c:0d:11:97:5d: d6:f7:db:e8:b5:ad:93:2e:ff:83:89:e4:55:25:47: 21:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:00:06:6D:62:7A:1B:EA:37:DE:7D:3A:CF:17:9E:49:0B:AA:F6:79 X509v3 Authority Key Identifier: keyid:11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:21:01:3d:ba:71:a0:3a:f7:ee:7b:15:8e:20:88:9b:57:b5: 35:83:9b:80:06:ae:ff:3f:17:9e:de:16:86:06:b3:0e:01:9b: 90:d6:b7:99:79:53:ad:7d:73:6a:cc:cb:00:47:dd:bb:e6:f9: a8:fb:9c:de:b6:99:60:11:c3:e6:eb:95:08:b6:ae:9d:e2:1d: d0:26:f3:6d:6c:be:72:bd:2a:66:10:92:b2:d6:30:fb:89:c5: be:1a:b2:0a:98:43:ce:00:ad:ca:0c:84:6c:0c:11:d1:b0:7a: 9f:d6:f2:cd:be:3f:7e:b5:1f:64:8b:6f:65:ee:58:75:d9:9c: 36:0f:24:56:aa:a9:4d:84:dd:f2:b9:c9:47:0f:70:cd:f9:a2: 6b:2c:90:0f:bc:9f:a7:d8:c1:75:d1:d7:b7:a8:f4:ef:84:c0: 90:a3:4b:27:ae:f2:ff:2f:2a:fe:f3:0c:68:f7:97:85:da:ce: 2b:59:a2:4e:5b:40:49:c0:e4:b2:5b:22:52:4f:96:fb:84:75: 8b:6d:12:75:fd:11:ed:51:e8:c1:ff:c7:49:a4:1c:48:eb:4d: b7:25:33:fe:84:69:c9:83:48:28:c0:97:f5:f1:06:d2:9d:35: 26:b4:2d:e7:97:1f:63:46:09:f3:13:cf:76:94:66:4a:12:77: dd:6c:f4:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7+EMxw15td2YezLorNsRp2nKw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0NTA1 NzlEMTI4ODAeFw0yNjAxMjUwOTE2NTJaFw0yNjAxMjgxODI0NTJaMDMxMTAvBgNV BAMTKEIzMDAwNjZENjI3QTFCRUEzN0RFN0QzQUNGMTc5RTQ5MEJBQUY2NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHNm4A8zL1FT7PxE90SUoXzSKb GP1ydnMUL3ERCG7Y9mLDRGAqzl8SwBYr8tN12n2IhYnXpFxzC4GZGNn+U/vFIZmz SftlyTTMrqGMjhSvkwAgkP2c43KML3IUKdbov/PvazNxNERi4kqbXYYYKMbR3c4J pLnjlZPEDqHRg+mDTHL6oxFDEnbM0t9EppOKgOD2oDtDfS6TF1+Tk4PJZqe/Kc55 qM8r62BeGuVW1knSYJzLqurjJ6n7elxph1jQnP9VcVM1GVWF5HFklrTPkiz/qhKZ 8r0SeRIaTFt1HEx+U/l6WJOKvcIZw508DRGXXdb32+i1rZMu/4OJ5FUlRyHxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUswAGbWJ6G+o33n06zxeeSQuq9nkwHwYDVR0j BBgwFoAUEUiaWAW3/icQrjLDB3w0UFedEogwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWJjZTcxZS00ZWU0LTQ1OTAtOTRmYi0zN2ZmZDlmMGQ2YjcvMC8xMTQ4OUE1ODA1 QjdGRTI3MTBBRTMyQzMwNzdDMzQ1MDU3OUQxMjg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0NTA1NzlE MTI4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFiY2U3MWUtNGVlNC00NTkwLTk0 ZmItMzdmZmQ5ZjBkNmI3LzAvMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0 NTA1NzlEMTI4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQhAT26caA69+57FY4giJtXtTWDm4AGrv8/ F57eFoYGsw4Bm5DWt5l5U619c2rMywBH3bvm+aj7nN62mWARw+brlQi2rp3iHdAm 821svnK9KmYQkrLWMPuJxb4asgqYQ84ArcoMhGwMEdGwep/W8s2+P361H2SLb2Xu WHXZnDYPJFaqqU2E3fK5yUcPcM35omsskA+8n6fYwXXR17eo9O+EwJCjSyeu8v8v Kv7zDGj3l4XazitZok5bQEnA5LJbIlJPlvuEdYttEnX9Ee1R6MH/x0mkHEjrTbcl M/6EacmDSCjAl/XxBtKdNSa0LeeXH2NGCfMTz3aUZkoSd91s9LU= -----END CERTIFICATE-----Generated at Sun Jan 25 20:37:15 2026 by rpki-client